Delivery System and Mode of Operation Thereof

Abstract

A medical system suitable for delivering a fluid to a patient according to multiple modes of operation, including a safety mode that additionally enables the delivery or the treatment to continue even when a probable anomaly is detected.

Claims

1-17. (canceled)

18. A method for controlling a dialysis system according to a defined treatment to achieve a set of objectives, the dialysis system including, a processor configured to control the dialysis system according to two modes of operation, including (i) a mode of normal operation determined by a first set of parameters configured to achieve substantially all of the objectives defined by the defined treatment, and (ii) a mode of safe operation determined by a second set of parameters configured to disallow at least some of the objectives of the defined treatment of being achieved but configured to allow the defined treatment to be substantially performed, and a sensor configured to send signals to the processor, the method comprising the following steps: determining a condition of operation of the dialysis system; receiving and analyzing the signals from the sensor of the dialysis system; automatically selecting the (i) mode of normal operation or the (ii) mode of safe operation according to at least one of the analyzing the signals and the condition of operation; and controlling the dialysis system according to the selected mode of operation.

19. The method as claimed in claim 18, wherein the dialysis system is configured to operate according to several modes of safe operation.

20. The method as claimed in claim 19, further comprising the step of: switching from one mode of safe operation to another mode of safe operation progressively.

21. The method as claimed in claim 18, wherein the dialysis system further comprises a pump controlled by the processor and configured to displace a medical fluid.

22. The method as claimed in claim 18, wherein the dialysis system is part of a medical system.

23. The method as claimed in claim 18, further comprising the step of: adapting the condition of operation according to the selected mode of operation.

24. The method as claimed in claim 21, wherein the first and the second set of parameters includes at least one of a duration of the defined treatment, a volume of the medical fluid displaced by the pump, a volume of the medical fluid used, a temperature of the displaced fluid, a pressure of the displaced fluid, and a delivery rate of the pump.

25. The method as claimed in claim 21, wherein the (ii) mode of safe operation includes a pump delivery rate that is lower than a pump delivery rate of the (i) mode of normal operation.

26. The method as claimed in claim 19, wherein during defined treatment, the processor is configured to switch from one mode of operation to another defined mode of operation according to at least one of the analyzing the signals and the condition of operation.

27. The method as claimed in claim 22, wherein the defined treatment is a peritoneal dialysis, and the method further comprises: performing several successive cycles including, an injection phase in which the dialysis system injects the medical fluid into a peritoneum of a patient, a stasis phase in which the medical fluid remains in the peritoneum of the patient for a determined length of time, and a drainage phase in which the pump removes the medical fluid from the peritoneum of the patient.

28. The method as claimed in claim 27, wherein at least one parameter includes at least one of a duration the stasis phase, a total volume of the medical fluid injected into the peritoneum, a total volume of the medical fluid removed from the peritoneum, a volume of the medical fluid injected into the peritoneum during an injection phase, the volume of fluid removed from the peritoneum during a drainage phase, the number of cycles, a duration of the injection phase, a duration of the drainage phase, a delivery rate of the pump in the injection phase, and a delivery rate of the pump in the drainage phase.

29. The method as claimed in claim 27, wherein the mode of safe operation is configured to decrease a risk of overfilling the peritoneum of the patient during the defined treatment.

30. The method as claimed in claim 27, further comprising the step of: estimating a risk of at least one of overfilling and underfilling the peritoneum of the patient by the processor.

31. The method as claimed in claim 27, wherein during the (ii) mode of safe operation, the processor is configured to instruct complete forced drainage of the peritoneum at least once before an end of the defined treatment.

32. The method as claimed in claim 31, further comprising the step of: performing several forced drainages at defined intervals.

33. The method as claimed in claim 18, wherein the condition of operation includes at least one of a status of the sensor, a drift in a measurement of the sensor, a crossing of a threshold in a measurement of the sensor, a leaving of a predefined range in a measurement of the sensor, and a discrepancy in a measurement against another sensor.

34. The method as claimed in claim 18, wherein the sensor is at least one of a pressure sensor and a temperature sensor operatively connected to the dialysis system.

35. A control device for controlling a dialysis system according to a defined treatment to achieve a set of objectives, the control device comprising: a processor configured to control the dialysis system according to at least two modes of operation, including (i) a mode of normal operation determined by a first set of parameters configured to achieve substantially all of the objectives defined by the defined treatment, and (ii) a mode of safe operation determined by a second set of parameters configured to disallow at least some of the objectives of the defined treatment of being achieved but configured to allow the defined treatment to be performed substantially; and a sensor configured to send signals to the processor, wherein the control device is configured to, determine a condition of operation of the dialysis system by the processor; receive and analyze the signals from the sensor of the dialysis system by the processor; automatically select the (i) mode of normal operation or the (ii) mode of safe operation according to at least one of the analyzing the signals and the condition of operation by the processor; and control the dialysis system according to the selected mode of operation.

36. The control device as claimed in claim 35, wherein the dialysis system further comprises a pump controlled by the processor and configured to displace a medical fluid.

37. The control device as claimed in claim 36, wherein the first and the second set of parameters includes at least one of a duration of the defined treatment, a volume of the medical fluid displaced by the pump, a volume of the medical fluid used, a temperature of the displaced fluid, a pressure of the displaced fluid, and a delivery rate of the pump.

38. The control device as claimed in claim 36, wherein the defined treatment is a peritoneal dialysis, and wherein the control device instructs the dialysis system to perform several successive cycles including, an injection phase in which the dialysis system injects the medical fluid into a peritoneum of a patient, a stasis phase in which the medical fluid remains in the peritoneum of the patient for a determined length of time, and a drainage phase in which the pump removes the medical fluid from the peritoneum of the patient.

Description

LIST OF FIGURES

[0030] The invention will be better understood hereinafter by means of a number of illustrated examples.

[0031] It goes without saying that the invention is not restricted to these embodiments.

[0032] FIG. 1 illustrate the coupling between a cassette and a cycler.

[0033] FIG. 2 illustrates various possible modes of operation.

[0034] FIGS. 3 to 7 schematically illustrate the possible operation of such a device.

[0035] FIG. 8 briefly illustrates a minimum embodiment.

[0036] FIGS. 9 to 11b schematically illustrate the possible operation of such a device.

NUMERICAL REFERENCES USED IN THE FIGURES

[0037] 1 Cycler [0038] 2 Cassette [0039] 3 Fluid inlet or outlet [0040] 4 Actuator (valve) [0041] 5 Pressure sensor [0042] 6 Region of coupling of the cassette to a pressure sensor [0043] 7 Pumping mechanism [0044] 8 Actuator (of the pumping mechanism) [0045] 9 Valve [0046] 10 Sensor [0047] 11 Processor [0048] 12 Possible mode of operation [0049] 20 Parameterizing [0050] 21 Pump activation [0051] 22 First condition met? [0052] 23 Switching the mode of operation [0053] 24 Previous parameters unchanged [0054] 25 Second condition met? [0055] 26 Stop the pump [0056] 30 Pumping system [0057] 31 Pressure sensor 1 [0058] 32 Pressure sensor 2 [0059] 33 Direction of flow of the fluid propelled by the pump [0060] 34 Processor

DETAILED DESCRIPTION OF THE INVENTION

[0061] In the present document, the detailed description of the invention includes embodiments of devices, systems and methods which are given by way of illustration. Of course, other modes of embodiment are conceivable and may be applied without departing from the scope or spirit of the invention. The detailed description that follows must therefore not be considered to be limiting.

[0062] Unless indicated otherwise, the scientific and technical terms used in the present document have the meanings commonly employed by those skilled in the art. The definitions given in this document are mentioned with a view to making the frequently used terms easier to understand and are not intended to restrict the scope of the invention.

[0063] The direction indications used in the description and the claims such as “top”, “bottom”, “left”, “right”, “upper”, “lower” and other directions or orientations are mentioned in order to provide greater clarity with reference to the figures. These indications are not intended to limit the scope of the invention.

[0064] Verbs “to have”, “to comprise”, “to include” or equivalent are used in this document in a broad sense and in general terms signify “include, but not limited to”.

[0065] The term “or” is generally employed in a broad sense encompassing “and/or” unless the context clearly indicates the opposite.

[0066] The term “treatment” is to be understood as meaning the action or series of actions aimed at achieving one or more therapeutic objectives during a defined period of time. Here, a treatment begins from the moment the patient switches the system on (and/or couples the fluidic connections) and continues until the patient switches this system off (and/or disconnects the fluidic connections). The system defines a collection of parameters (pump speed, pressure, actuation, temperature, pressure monitoring, liquid volumes displaced, starting and stopping of phases, etc.) for performing a treatment. A treatment is said to be normal if the collection of parameters makes it possible substantially to achieve the predefined therapeutic objectives. The duration of the treatment is qualified as normal if this duration is substantially close to the normal treatment duration. In other words, the term “normal” here qualifies the operation/progress of the treatment.

[0067] The term “effectiveness” is to be understood as qualifying an effect, in this instance a treatment. Also, the term “effective” may be defined as follows: “something that produces the expected effect”. In other words, a treatment that is effective needs to be understood to mean a treatment defined by a prescription and which has produced the desired effect (for example quantity of ultrafiltrate obtained at the end of the treatment). Thus, the term “effectiveness” here qualifies the result of the treatment. There is an idea of relativity that comes out of the term “effectiveness”. Specifically, a treatment may be more or less effective. This effectiveness may vary considerably from one treatment to another and is dependent on numerous variables. In the present document, the effectiveness between normal treatment and the treatment actually carried out is compared.

[0068] The expression “mode of safe operation” is to be understood to mean a mode of operation of the system that does not necessarily make it possible to achieve the predefined objectives or the desired effectiveness of treatment referred to as normal. In other words, the mode of operation referred to as normal operation should in theory be more effective than a mode of safe operation. In the field of medicine, this mode of safe operation must also meet patient safety requirements.

Concept and Methods of Operation:

[0069] According to the embodiment of FIG. 2, the system comprises a checking device employing at least one element of the system such as an electronic processor (11) and a sensor (10). The system is designed to determine or select a collection of parameters (volume injected, drained, heating of the fluid, pressure, delivery rate of the pump, duration, number of cycles and phases, etc.) that can be predefined by the care personnel. Using this checking device, the system is designed to define or select at least the following modes: a mode of normal operation and a mode of safe operation. A mode of safe operation may be a mode of minimal operation. There may also be several intermediate modes of safe operation. These modes are characterized by their lower effectiveness as compared with the normal mode while remaining more effective than the minimal safe mode.

[0070] A memory connected to the processor may be used to record the various modes of operation and the system is designed by virtue of the checking device to select one of these modes of operation. A doctor may preparameterize one or more different modes of operation according to different possible scenarios (defective sensor, etc.). A decision tree may be used by the checking device to choose the appropriate mode of operation. The selection may also be performed in cascade where the checking device moves on from one mode of operation to another until a mode of operation compatible with the conditions known to the system is obtained.

[0071] In one embodiment, the system is designed to operate as disclosed in FIG. 3. At the start of treatment, the system defines parameters (20) according to the prescription defined or programmed or given by the care personnel. This first mode of operation will be termed normal. The system starts the pump and, thanks to the sensors, the system verifies or monitors a collection of data. If a first collection of conditions (22) is not met then the system can switch to a mode of safe operation (which may be the minimal mode) guaranteeing patient safety and continuing the treatment even though a condition is not met (for example a sensor is faulty). The treatment will then undoubtedly be less effective but will remain safe and the patient will nevertheless have received some treatment. This is a mode of safe operation. If the first condition is met then the treatment can continue (or begin) with the parameters defined previously. A collection of conditions may include one or more conditions (not crossing a threshold and/or exiting a range of operation and/or range of measurements and/or a data mean and/or a step correctly completed, etc.). The various modes of operation may be characterized by a collection of predefined parameters and the system moves on from one mode of operation to another as soon as one or more operating conditions are not met (a threshold is crossed, a prescribed quantity of fluid is not completely used, a sensor is defective, sensor data are incoherent, there is too great a measurement discrepancy between the various sensors, etc.).

[0072] The system may be designed to monitor this first collection of conditions right from the start of treatment and/or during the course of treatment (periodically or otherwise). For example, at each start of phase and/or at regular or random time intervals. A second collection of conditions may be verified right at the start of the treatment and/or during the treatment (periodically or otherwise). If this second collection of conditions (24) is met then the system may be designed to: [0073] periodically reverify the first collection of conditions (option 1), and/or [0074] maintain the previously defined mode of operation (option 2).

[0075] The system may carry out the check on the various conditions sequentially or in parallel. Such verifications may be performed just once or throughout the treatment at regular or variable time intervals.

[0076] When the second condition is not met, the system may decide: [0077] to stop the treatment, or [0078] to redefine (20) a new collection of parameters so as to continue the treatment in a mode of safe operation which nevertheless remains less effective (for example longer because the new parameterizing defines a slower delivery rate) than the mode of normal operation but more effective than the mode of minimal operation. Before redefining this new collection of parameters, the system may temporarily stop the pump.

[0079] In one embodiment, the system is designed to operate as divulged in FIG. 4. The system at the start of treatment parameterizes a mode of normal operation and the process is performed for the most part as in FIG. 3. As long as the second collection of conditions is met, the system will continue to operate according to the mode of normal operation. If the second collection of conditions is not met, the system will also verify the first collection of conditions. If the first collection of conditions is not met then the system will switch to a mode of minimal operation. If the first collection of conditions is still met then the system will modify one or more parameters and will switch to a mode of safe operation so that the second collection of conditions is met. The second collection of conditions may be adapted according to predefined parameters. Namely, the second collection of conditions may still be identical even in the event of a change of mode of operation, or it may be modified. In the latter instance, one or more conditions may be less restrictive (for example: broadened range: threshold extended, acceptance of a step not correctly completed, etc.). As long as the second collection of conditions is met the system may maintain the parameters defined previously (whether that be in the normal or the safe mode). The system may also be designed to revert to a mode of normal operation after a certain length of time or according to certain conditions. The system will perform a loop check on the conditions and will adjust the mode of operation to best suit, according to the data it receives.

[0080] In one embodiment, the system is designed to operate as disclosed in FIG. 5. The system at the start of treatment parameterizes a mode of normal operation and the process takes place in part as in FIGS. 3 and 4. The system verifies a second collection of conditions and optionally a third collection of conditions (at the same time or sequentially or in the event of a change of mode of operation).

[0081] In one embodiment, the system is designed to operate as disclosed in FIG. 6. The system at the start of treatment parameterizes a mode of normal operation and the process takes place in part as in FIGS. 3, 4 and 5. In this system, the third collection of conditions is monitored, insofar as the second collection of conditions is met. However, as long as the third collection of conditions is not met, the treatment continues according to the previous mode of operation. And when the third collection of conditions is met, then the treatment is stopped. Here, the third condition may be the volume injected, the programmed number of cycles, the duration of the treatment.

[0082] In an embodiment disclosed through FIG. 9, the system comprises a certain number of predefined safe modes of which one is a minimal mode. By predefinition, it may be appreciated that the system already has a certain number of safe modes one of them being a minimal mode in which the parameters are all defined at least before the start of the treatment. A strategy may be defined for determining (using algorithms, a fuzzy-logic approach, or an approach of the artificial intelligence type for example) the new parameters of the safe treatment according to the parameters of the normal treatment and the circumstances encountered. These various parameters will tend towards the series of parameters defining the minimal safe mode. During the course of treatment, the system regularly performs various tests and observes the way in which the various elements of which it is made up behave. These tests may be performed during the treatment or may require a temporary stoppage of the treatment. For preference, these tests are performed by the processor of the system and use data relating to the operation of the system (pressure, temperature, delivery rate, component status, etc.) and/or of the progress of the treatment (start/end of cycle, of phase, remaining quantity of fresh dialysate, quantity removed, UF, etc.). If, during the course of one of these tests or observations, the system notices or suspects a failure or a condition that has not been met, it may decide to implement the mode of safe operation. The mode of safe operation chosen will be dependent on the analysis made by the system of the actual or supposed fault. Once in this safe mode, the system will continue the treatment and the tests and checks. It may be that the switch to a first safe mode renders these tests and checks normal. It is also possible that these tests and checks will remain abnormal but that in such a safe mode the continuation of the treatment will be safe for the patient. If, over the course of time, the results of the tests and checks become poor again or deteriorate excessively, the system may decide to switch to a second mode of safe operation, less effective than the previous modes, but once again safe for the patient. This process may be repeated several times until the minimal safe mode is reached.

[0083] In one embodiment, the system may follow a strategy in which each mode of operation is tested in order to obtain satisfactory test results (normal.fwdarw.A.fwdarw.B.fwdarw.C.fwdarw.. . . .fwdarw.Z). In another embodiment, one mode of safe operation may be favored according to the results of the previous test or tests (normal.fwdarw.A.fwdarw.D.fwdarw.B). Although in these examples mention is made of several modes of safe operation which succeed one another, the system may simply pass on from a mode of normal operation to a suitable mode of safe operation (normal.fwdarw.C). The system may also be designed to revert to a mode of normal operation (B.fwdarw.normal).

[0084] At any time, the system may decide to stop the therapy if it considers that the therapy is sufficiently well advanced (according to a series of criteria defined in advance) or if it considers that even the minimal safe mode is unable to guarantee patient safety.

[0085] In one embodiment, the system is designed to operate as disclosed in FIGS. 10, 11a and 11b, reusing the concepts set out hereinabove.

Embodiments and Examples of Use

[0086] For a better understanding of the operation, the description considers the example of a dialysis system as disclosed in FIG. 1. The dialysis system comprises a cycler (1) (here depicted without its housing), and a cassette (2). The cassette is a disposable element whereas the cycler is used several times with different cassettes. The cassette (2) comprises a pumping mechanism (7) which may be a peristaltic or some other type (pneumatic, etc.) of pump, fluid inlets and outlets (3), valves (9), regions for coupling with a sensor (5) of the cycler (1). The inlets and outlets (3) may be designed to be connected via a tube (not depicted) to: a dialysate reservoir (not depicted), a patient (not depicted), a heating system (not depicted) and/or a fill and/or drain system (not depicted). The cycler (1) comprises a processor (not depicted in FIG. 1), sensors (5), actuators (4, 8) designed to collaborate with the valves (9), the pumping mechanism (7) of the cassette. The cassette and the cycler are designed for perfect coupling of the sensors and actuators with the elements of the cassette. The cycler may also contain other sensors such as temperature sensors for measuring the temperature of the fluid or the ambient temperature, etc. If, for example, a sensor is defective or the cassette is defective or an element is present between the sensor and the cassette or between the cycler and the cassette, it may happen that the coupling between cassette and sensor is imperfect, giving rise to a drift in the data or giving rise to data that are completely erroneous. The membrane covering the flexible zone (6) may also be defective (noncompliant surface finish, deformation, etc.).

[0087] As in any fluid delivery system, the volume of fluid delivered or drained is an essential data item that needs to be controlled. In the prior art, mention is notably made of the danger of overfilling dialysate in the patient's peritoneum. It is thus essential to have control over this data, which is the result of the volume delivered and/or drained. According to the type of device, it may be crucial to check the absolute value of the volume of fluid delivered and of the volume drained, or simply to ensure a good control of the balance, namely good control over the difference between the volume delivered and the volume drained. These volumes may be estimated using the pump itself (piston pump, peristaltic pump, etc.) and/or using sensors arranged or not arranged on the fluid line. Now, this estimate may be dependent on a certain number of physical causes such as the state of wear of the pumping system, the pressure at the inlet and/or at the outlet of the pump, the temperature, the programmed fluidic path, etc. This makes accurately estimating these volumes difficult.

[0088] During a prior study, the effects of at least one of these parameters on the volume pumped is established by physical theory and/or numerical modeling and/or through characterization testing. This characterization testing may be carried out according to a test plan that is optimized to reduce the number of tests needed while at the same time covering the necessary range with sufficient precision. Such plans may be built on the basis of the “design of experiment” technique, using known methods (for example the Taguchi method) which may or may not include interaction between these causes. The physical values (for example the pressure of the fluid at the inlet of the pump) are themselves measured in the device by sensors. By measuring these physical values and with the corresponding effects previously established, the volume delivered by the pumping system can be corrected to improve its precision as disclosed in FIG. 7.

[0089] In general, each device comprises a determined number of sensors (often for cost and maintenance reasons). The system needs to operate with this limited number of sensors which means that the system has to operate with imperfect awareness of the environment and of certain factors. For example, the relative position of the patient and of the cycler is an important piece of information that will have an impact on the pressures of the fluid displaced in the cassette. In theory, the patient ought not to move during the treatment and the devices are not provided with sensors that are sufficiently precise to determine whether or not the patient moves during treatment. Now, if the patient changes position, for example if he rises by 20 cm with respect to the cycler, this will have a significant impact on the fluid pressure measurements and potentially also on the estimate of the displaced volumes. In other words, if the patient moves the cycler may detect that a variation in pressure has occurred, but does not necessarily know the cause for this (the origin of such a change in pressure may in actual fact have other causes such as, for example, the appearance of a restriction in the fluidic path. The cycler at best will notice this change but will have no means of discerning its origin). Thus, the cycler needs to operate to the best of its ability according to the given circumstances, according to the level of awareness of the status of the system and/or of the patient's environment. Thus, the system may have difficulty in assessing whether the observed change in the measurement is the result of a defect associated with the sensor or a movement of the patient.

[0090] For measurement reliability purposes it is common practice to have at least a level of redundancy in sensors (for example two independent sensors are used to measure the pressure at the inlet to the pumping device). These two sensors are regularly compared in order to detect any potential error with one of the sensors, originating for example from a drift in the measurement or degradation of the interface between the sensor and the environment that is to be measured. According to the prior art, as soon as one of the sensors is deemed to be defective, the system goes into alarm mode and the treatment is interrupted. The object of the invention in such a situation is to continue the treatment in a mode referred to as safe mode.

[0091] For greater clarity, the document sets out a system in which the means for calculating the volumes comprise a pressure sensor. However, these means may be other elements such as a volumetric chamber or a syringe plunger used for measuring volumes.

[0092] According to one embodiment set out in FIG. 8, the peritoneal dialysis device has two pressure sensors (31, 32) intended to measure the pressure at the inlet of a pumping system (30) (for example a peristaltic pump). According to the pressure measured, the system adapts the delivery rate of the pumping system (30) in order to take account of the variations in delivery rate as a function of said inlet pressure. The processor (34) analyzes the data measured by the pressure sensors (31, 32), estimates, as a function of at least these data, the quantity of fluid displaced by the pump. The processor is designed to adjust the operation of the pump (speed, rotational speed in the case of a peristaltic pump, delivery rate, operating time, etc.) accordingly in order to keep an effective delivery rate corresponding to the prescription.

[0093] In the event of a suspected failure of one of the pressure sensors, the system switches to safe mode. This mode of operation may reduce the volume of at least one fill phase in order to limit the filling of the peritoneal cavity by a percentage that corresponds, for example, to the possible maximum positive deviation of pumping or to a maximum tolerated deviation beyond which there could be a risk to the patient. By making this correction, the system ensures that the peritoneum is not overfilled (such overfilling for example representing a cardiovascular risk to the patient), even assuming that the sensor remaining operational should fail.

[0094] By way of example, in the event of failure of one of the two sensors (or assuming that one or both sensors is potentially defective), each filling of the peritoneal cavity in the next cycle will be reduced by 3% of the programmed volume. This percentage may be predefined according to the patient and/or according to the design of the system (the capacity of the pump, etc.). This percentage for example represents the risk of overfilling associated with this failure or the maximum excessive overfilling that could carry a risk to the patient. In this example, this may be a failure that is assumed because the discrepancy in measurement between the two sensors has crossed a certain threshold, leading to the assumption that at least one of the two sensors is defective or incorrectly coupled with the measurement zone (for example the membrane of the cassette).

[0095] During multiple fillings, this percentage may be adapted to take account of the cumulative effect of overfilling on each cycle (for example 8 cycles at 3% represents a maximum risk of 24% of overfill). Of course the percentage may be adapted to take account also of the lesser drainage due to the same fault on each cycle. Which may represent, for example 24%, for 8 filling cycles, which combine with the 24% of lower drainage giving a total of 48% overfill over 8 cycles, which is close to the tolerated limit.

[0096] These percentages may naturally differ greatly according to the filling and/or drainage conditions and the system will ideally best define the conditions for reducing the filling and/or increasing the drainage (in the case of partial drainage) in order to limit of risk of exceeding a 50% overfill (namely 150% of the peritoneal volume which is generally considered to be the acceptable limit). It is commonly conceded that 160% must under no circumstances be exceeded and that 180% carries a serious risk to the health of the patient. If the cumulative effect of various cycles carries a risk of causing these safety limits to be exceeded, it may be desirable during the treatment to carry out a full drainage cycle even though in the mode of normal operation the drainage of this cycle would not have been a complete drainage. Thus, by virtue of this complete drainage, the system ensures that the peritoneal cavity is drained almost completely and can therefore begin to cumulate the errors again from an empty belly. Thus, the system may carry out at least one complete drainage at fixed or variable cycle intervals or at intervals that may be dependent on the possible error percentage. This number may be set, for example, at 6 or 8 consecutive cycles.

[0097] As soon as a sensor detects an abnormal variation in the pressure, even though the system cannot truly know the cause of this, the processor may decide to modify the mode of operation in order to adapt to this variation. For example, before beginning the treatment, the system defines certain parameters such as the volume delivered, the delivery rate and/or the phases of exchange. The system will then operate in a mode of normal operation. If the pressures measured at the inlet of the pumping system lie within an acceptable pressure range, the mode of normal operation will be used throughout the treatment. However, if at some moment in the treatment the measurements drift suddenly or progressively, and then cross a certain threshold, then the system may switch to another mode of safe operation in order to adapt to these measurements. The system will define at least one new collection of parameters, for example a reduction in the delivery rate (because the pressure sensors have detected an increase in pressure, which could be due to the patient rising relative to the cycler). This mode of operation may be considered to be a mode of safe operation because it will potentially be less effective than the mode of normal operation. Here, the treatment will be slower because of the drop in flow rate. If the drift continues and crosses another threshold then the system may once again redefine a collection of new parameters.

[0098] In reality, the system does not know whether the patient has actually moved. This variation in pressure may be down to a number of causes. However, if this variation is due to the fact that the patient has, for example, risen by 20 cm, then the delivery rate needs to be lowered in order to avoid overfilling the patient's peritoneal cavity. It is for this reason that the system redefines these parameters even though the other systems of the prior art would have stopped the operation of the system. Each time the parameters are redefined, the system may also redefine the thresholds.

[0099] According to another embodiment, the safe mode takes account of possible errors in measuring the temperature of the fluid and, therefore, possible errors in the filling and/or drainage volume.

[0100] When the system is caused to switch to a mode of safe operation during a single treatment, the system may estimate that the cause of the problem was only temporary. In that case, the system may comprise a screen or an indicating means (colored LED, noise, etc.) to inform the patient that a problem has been detected during treatment. A memory may log these data so that the patient can transmit them to his or her doctor or with a view to logging machine errors. Ideally, the system will inform the patient that his or her treatment has been modified while in progress and that a certain percentage of the expected treatment will at least have been attained (for example 80%, which may quantify the therapeutic minimum obtained and cause the next treatments on subsequent days to be adapted, possibly accordingly).

[0101] If the problem should recur, which means to say occur repeatedly in different treatments, then the system may be designed to encourage the patient to intervene or request an intervention or the system may itself request intervention from the maintenance center. The screen may advise the patient to perform certain operations or invite him or her to contact the maintenance department.

[0102] As an example of operation of an embodiment allowing several adaptations, the pressure value measured at the pump inlet reaches a limit either because the patient has moved (with a sensor that is operational) or because the pressure sensor is drifting. In the latter instance, the sensor is defective and there is a risk of overfilling. To avoid overfilling, the delivery rate is reduced (which decreases the pressure at the inlet of the pump and therefore the risk of overfilling). This adaptation of the delivery rate corresponds to adaptation No. 1. With this new delivery rate, a new safety limit for the pressure measurement is calculated. If this new limit is reached, the delivery rate is reduced again, which corresponds to adaptation No. 2. The delivery rate can thus be reduced in succession n times (n adaptations) down to a delivery rate that no longer represents any risk (for example because the risk of overfilling is reduced below the safe limit of 120 to 150%). The consequence of this change in delivery rate will have an impact on the result of the treatment. Specifically, if the treatment is to be given over a determined length of time then all or part of the final cycle will not be able to be performed. In an extreme case, there may be a number of cycles that cannot be performed in order to comply with the predefined treatment duration. Thus, the result of the treatment will not be of such good quality as/will be less effective than the desired result. Thus, not all of the objectives of the treatment will be met. In other words, only some of the objectives will be met, in this instance at least the duration of the treatment. In another embodiment, it is the stasis duration that may be favored. Thus, the duration of stasis will be unchanged because it is predefined, but the total duration of the treatment will instead increase. The prescriber may determine in advantage which objectives cannot be modified or which are to be prioritized in the event of a problem. Thus, he or she may predefine the parameters that cannot be changed by the processor when switching to a mode of safe operation.

[0103] In instances in which the system comprises two redundant sensors, the method or methods described hereinabove are particularly suitable when one or both sensors are defective or when the cassettes is incorrectly installed in the cycler or when the pressure sensor or sensors are incorrectly coupled to the cassette.

[0104] Example of operation of an embodiment allowing complete drainage, a fault is detected which, in the worst case scenario, represents a risk of overdosing of the pumping device by 6%. Thus, in theory, on each cycle, 6% of volume is added to the volume already present, which represents a volume in the peritoneum of 106% in the first cycle, 112% in the second cycle, etc. In this example, there are two possible protective measures. The first is to reduce the volume injected in the filling phases by 3%. The second is to impose a complete drainage phase at the end of 8 cycles. On balance, the cumulative errors over 8 cycles represent a maximum volume in the peritoneum of 100%+8×3%, namely 124%, which is an acceptable volume.

Possible Methods:

[0105] The document further discloses a method for controlling a medical system according to a defined treatment in order to achieve a collection of objectives, the method comprising: [0106] providing a dialysis system which comprises: [0107] a processor designed to control the medical system according to at least two modes of operation: [0108] a mode of normal operation determined by a first collection of parameters making it possible to achieve substantially all of the objectives defined by the treatment [0109] a mode of safe operation determined by a second collection of parameters that does not allow all of the objectives defined by the treatment to be achieved but that does allow the treatment to be performed substantially, [0110] a sensor designed to send signals to the processor, [0111] determining at least one condition of operation, [0112] receiving and analyzing the signals from the sensor, [0113] automatically selecting the mode of normal operation or the mode of safe operation according to the signal analysis and/or said at least one condition of operation, [0114] controlling the medical system according to the mode of operation selected.

[0115] The system described hereinabove may be designed to operate according to several modes of safe operation. Also, the processor may switch from one mode of safe operation to another mode of safe operation progressively.

[0116] According to one embodiment, the medical system comprises a pump controlled by the processor and designed to displace a medical fluid. The medical system may, for example, be a dialysis system.

[0117] Optionally, the method may comprise the following step: adapting at least one condition of operation according to the mode of operation selected.

[0118] According to one embodiment, the parameter may be: the duration of the treatment, a volume of medical fluid displaced by the pump, a volume of medical fluid used, the temperature or the pressure of the displaced fluid or the delivery rate of the pump. If the medical device comprises a pump, then the mode of safe operation may be characterized by a pump delivery rate that is not as high as in the mode of normal operation.

[0119] For preference, the processor during treatment may switch from one mode of operation to another defined mode of operation according to the signal analysis and/or to said at least one condition of operation.

[0120] If the treatment is a peritoneal dialysis then the dialysis system may be designed to perform several successive cycles comprising an injection phase in which the system injects the medical fluid into the peritoneum of the patient, a stasis phase in which the medical fluid remains in the patient's peritoneum for a determined length of time, and a drainage phase in which the pump removes the fluid from the patient's peritoneum. In that case, the parameter(s) may be: the duration of each stasis phase, the total volume of fluid injected into and/or removed from the peritoneum, the volume of fluid injected into the peritoneum during an injection phase, the volume of fluid removed from the peritoneum during a drainage phase, the number of cycles, the duration of the phases or the delivery rate of the pump in the injection and/or drainage phase. Furthermore, during a mode of safe operation, the processor may be designed to command a complete forced drainage of the peritoneum at least once before the end of the treatment. Optionally, the processor may be designed to perform several forced drainages at defined intervals.

[0121] According to one embodiment, the mode of safe operation may be designed to decrease the risk of overfilling the patient's peritoneum during the treatment. Further, the medical device may be designed to estimate the risk of overfilling or underfilling the patient's peritoneum.

[0122] For preference, one condition of operation is: the status of the sensor, a drift in the sensor measurement, the crossing of a threshold or the leaving of a predefined domain, or a discrepancy in the measurement against another sensor. The sensor may be a pressure sensor or a temperature sensor.

[0123] The document discloses another method designed to control a dialysis apparatus. This other method may comprise the following steps: [0124] observing at least one parameter relating to the dialysis [0125] determining a first acceptable range of values for said parameter.

[0126] For preference, the switchover from one mode of operation to a first mode of safe operation if the data of said at least one parameter are outside said first range of acceptable values. The observed parameter may be the volume of dialysate displaced to and/or from a patient's peritoneum.

[0127] The method may also comprise: [0128] the following additional steps: [0129] determining a second range of acceptable values for said parameter [0130] switching from the first mode of downgraded operation to a second mode of safe operation if the data of said at least one parameter are outside said second range of acceptable values. [0131] And/or the following additional steps: [0132] determining an nth range of acceptable values for said parameter [0133] switching from the n−1th mode of downgraded operation to an nth mode of safe operation if the data of said at least parameter are outside said nth range of acceptable values.

Other Possible Embodiments

[0134] The document discloses a system for medical use which may comprise a pump, means for estimating a volume of fluid displaced by the pump, means for operating said pump according to the objectives defined for the treatment; in which said pump is designed to deliver a fluid to a patient or to remove a fluid from a patient. The operating means may determine a mode of operation of the pump as a function of data sent by the means of estimating displaced volume. Furthermore, at least one mode of operation may be a safe mode allowing the system to continue the treatment in order to get close to at least one of the objectives defined for the treatment in the event of at least part of the operating and/or estimating means being potentially defective, while at the same time limiting the risks to the patient.

[0135] The operating means may change the mode of operation without the intervention of the patient or of the care personnel. The treatment may correspond to that of a peritoneal dialysis and may comprise at least two cycles of fill and drain phases.

[0136] Optionally, during a safe mode, the operating means may reduce the volume of fluid displaced during at least one fill phase and/or increase the volume of fluid displaced during at least one drain phase.

[0137] At least one of the objectives may be the treatment time, the quantity of ultrafiltrate removed, the volume of fluid delivered to the patient's peritoneum and/or the volume of liquid removed from the patient's peritoneum, and/or the total dialysis time performed. The means of estimating the displaced volumes may comprise one or more pressure sensors or volumetric chambers. The means of estimating the displaced volumes may comprise one or more temperature and/or viscosity sensors, or calibration means. In such a case or cases, the estimating means may be redundant and at least one of the two means may be deemed to be potentially defective, thus leading to the safe mode being activated. The redundant estimation means may deviate from one another by a certain amount at least. The filling phase of each cycle in safe mode may be reduced by at least 1% of the prescribed volume. The drainage phase of each cycle in safe mode may be increased by at least 1% of the prescribed volume, if the prescribed drainage is not a total drainage. The most complete possible drainage may be imposed during at least one drain phase if the potential overfilling of the peritoneal cavity as a result of the cumulative effect of the various preceding cycles crosses a threshold of between 120 and 180%.

[0138] According to one embodiment, the automated dialysis apparatus is designed to perform peritoneal dialysis on a patient and may comprise a pump operated by a controller and designed to displace at least a first defined volume of dialysate from dialysate supply means into the peritoneal cavity of the patient during a fill phase and to remove at least a first defined volume of dialysate from the patient's peritoneal cavity during a drain phase. The apparatus may further comprise a sensor connected to the controller and designed to estimate the volumes of dialysate displaced during at least one of these two phases.

[0139] For preference, the apparatus comprises at least two modes of operation one of them being a mode of operation that allows all the defined objectives to be achieved and at least one other being a mode of safe operation designed to come close to at least one of said defined objectives without ever achieving it, while at the same time ensuring patient safety. The mode of operation may be determined by the controller without the intervention of the patient or of the care personnel, for example as a function of the estimate of the volumes displaced.

[0140] For preference, the mode of safe operation may be actuated by the controller as soon as an error in the estimation of the volumes is possible or detected. The mode of safe operation may be determined by the controller as soon as the data from the sensor cross a certain measurement threshold or exhibit a certain difference with respect to the expected measurement. The mode of safe operation may be designed to reduce the delivery rate of the pump or the duration of the treatment or at least a volume of dialysate delivered during at least one fill phase.

[0141] According to one embodiment, the apparatus may comprise several successive safe modes which allow treatment to be continued but which increasingly diverge from at least one of the defined objectives. The controller may select one of the safe modes according to the measurements from at least one of the sensors. The controller may progressively modify its mode of operation until the measurements from the sensor fall within a predefined range.

[0142] According to one embodiment, the peritoneal dialysis system may comprise a liquid pump, means for operating said pump. Where the pump is designed to deliver or remove a liquid to or from the peritoneal cavity of a patient and the system may be configured to operate according to at least one of the following two modes of operation: [0143] a first mode of operation referred to as normal defining a first collection of parameters intended to achieve a given treatment effectiveness [0144] a second mode of operation referred to as safe defining a second collection of parameters intended to achieve: [0145] minimum effectiveness of the treatment, and/or [0146] effectiveness lower than the effectiveness of the first embodiment, while ensuring patient safety during the treatment.

[0147] In another embodiment, the system may be configured to operate according to at least one of the following two modes of operation: [0148] a first mode of operation referred to as normal adhering to the parameters defined by a given prescription [0149] a second mode of operation referred to as safe which does not adhere to at least one of the parameters defined by said prescription but which guarantees patient safety until the end of the programmed treatment.

[0150] According to one possible embodiment, the automated dialysis apparatus is designed to perform peritoneal dialysis on a patient in accordance with a collection of parameters defined by a given prescription guaranteeing a certain treatment effectiveness. The apparatus may comprise a liquid pump, means of operating said pump according to parameters defined by a given prescription. Where the pump is designed to deliver or remove a liquid into or from the peritoneal cavity of a patient and the apparatus is configured to modify at least one of said parameters so as to perform substantially the entirety of the treatment while at the same time guaranteeing patient safety. However, the new parameters might not allow the expected effectiveness to be achieved, in response to a suspected at least partial deficiency with an element (for example a sensor, a pump) to operate said dialysis apparatus correctly.